Polymarket Odds

Security checks across malware telemetry and agentic risk

Overview

This skill is a read-only Polymarket odds lookup CLI that matches its description, with disclosed external API calls and no credential, persistence, or data-modifying behavior.

This appears safe to use for public market-odds lookups. Before installing, understand that your search terms go to Polymarket's APIs and that the returned odds are estimates from markets, not guaranteed predictions or advice.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Info
What this means

Using the skill runs local JavaScript that queries Polymarket APIs and prints results.

Why it was flagged

The skill is intended to execute the included JavaScript CLI locally. This is disclosed and central to the purpose, and the provided code does not show installers, downloads, obfuscation, or shell chaining.

Skill content
Run with: node /path/to/skill/polymarket.mjs <command>
Recommendation

Run it from the reviewed skill folder as a normal user; elevated permissions are not needed.

#
ASI07: Insecure Inter-Agent Communication
Info
What this means

Market search terms, slugs, and token IDs may be sent to Polymarket's public APIs.

Why it was flagged

User search terms are sent to Polymarket's external public-search endpoint. This is disclosed and purpose-aligned, but it means query text leaves the local environment.

Skill content
const url = `${GAMMA_API}/public-search?q=${encodeURIComponent(query)}&limit=50`;
Recommendation

Avoid putting confidential or private information into market search queries.

#
ASI09: Human-Agent Trust Exploitation
Low
What this means

A user may give too much weight to the returned probabilities when making decisions.

Why it was flagged

The wording strongly frames prediction-market prices as more accurate. That is relevant to the skill's purpose, but users could over-trust market odds as guaranteed predictions.

Skill content
Real money markets = more accurate than polls
Recommendation

Treat the results as market-implied probabilities, not financial, betting, political, or factual certainty.